Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227541 4.3 警告 Sawmill - Sawmill におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1079 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227542 7.5 危険 sphere.xlentprojects - XlentProjects SphereCMSSpey の archive.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1078 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227543 6.8 警告 VBSEO - vBulletin 用の Crawlability vBSEO プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1077 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227544 4.3 警告 sniggabo - Sniggabo CMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1072 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227545 7.5 危険 phpmdj - phpMDJ の profil.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1071 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227546 7.5 危険 proarcadescript - ProArcadeScript の games/game.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1069 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227547 5 警告 the-ghost - AWCM におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1066 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227548 6.8 警告 PHP工房 - Phpkobo Free Real Estate Contact Form におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1063 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227549 6.8 警告 PHP工房 - Phpkobo Free Real Estate Contact Form の codelib/sys/common.inc.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1062 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
227550 6.8 警告 PHP工房 - Phpkobo Short URL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1061 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195421 6.1 MEDIUM
Network 		jenkins cas Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks. - CVE-2021-21673 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
195422 4.3 MEDIUM
Network 		jenkins selenium_html_report Jenkins Selenium HTML report Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. CWE-611
XXE 		CVE-2021-21672 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
195423 7.5 HIGH
Network 		jenkins jenkins Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login. - CVE-2021-21671 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
195424 4.3 MEDIUM
Network 		jenkins jenkins Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permissi… - CVE-2021-21670 2024-11-21 14:48 2021-07-1 Show GitHub Exploit DB Packet Storm
195425 7.5 HIGH
Local 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co… CWE-787
 Out-of-bounds Write 		CVE-2021-21574 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
195426 7.5 HIGH
Local 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co… CWE-787
 Out-of-bounds Write 		CVE-2021-21573 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
195427 7.5 HIGH
Local 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary co… CWE-787
 Out-of-bounds Write 		CVE-2021-21572 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
195428 6.5 MEDIUM
Network 		dell alienware_m15_r6_firmware
chengming_3990_firmware
chengming_3991_firmware
g15_5510_firmware
g15_5511_firmware
g3_3500_firmware
g5_5500_firmware
g7_7500_firmware
g7_7700_firmwa… 		Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may explo… CWE-295
Improper Certificate Validation  		CVE-2021-21571 2024-11-21 14:48 2021-06-25 Show GitHub Exploit DB Packet Storm
195429 7.5 HIGH
Network 		zte zxv10_b860h_v5.0_firmware A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with th… CWE-276
Incorrect Default Permissions  		CVE-2021-21737 2024-11-21 14:48 2021-06-24 Show GitHub Exploit DB Packet Storm
195430 6.1 MEDIUM
Network 		mongo-express_project mongo-express mongo-express is a web-based MongoDB admin interface, written with Node.js and express. 1: As mentioned in this issue: https://github.com/mongo-express/mongo-express/issues/577, when the content of a… - CVE-2021-21422 2024-11-21 14:48 2021-06-22 Show GitHub Exploit DB Packet Storm